Manager, Vulnerability Management

📋 Description

• • Lead and mature Alkami’s enterprise vulnerability management program to proactively reduce risk across infrastructure, applications, and cloud environments, ensuring the protection of both the company and its financial institution clients through scalable, automated, and metrics-driven processes.
• • Mentor and coach a growing vulnerability management team while remaining hands-on with tools and workflows, partnering closely with Security Architecture, Engineering, IT, DevOps/SRE, and Compliance to drive cross-functional alignment and secure-by-design practices.
• • Alkami is a remote-first, high-growth SaaS company recognized for its award-winning culture, innovation in fintech, and commitment to employee development—offering a platform where security leaders can influence strategic risk decisions and grow alongside the organization.
• • Drive continuous improvement in vulnerability lifecycle management by optimizing scanning, triage, risk scoring, remediation tracking, and reporting, while influencing executive stakeholders through clear, data-backed insights and participation in the Information Security Steering Committee.
• • What you’ll do day to day:
• • Guide the full vulnerability management lifecycle—from asset discovery and scanning to prioritization, remediation tracking, and validation—ensuring timely and accurate coverage across on-prem, cloud, and hybrid environments.
• • Optimize and configure vulnerability management platforms (e.g., Tenable, Qualys, Rapid7) and integrate them with ticketing systems like Jira or ServiceNow to automate workflows and reduce manual effort.
• • Develop and deliver executive-grade metrics and dashboards that measure risk reduction, SLAs, and program effectiveness, enabling data-driven decisions at leadership levels.
• • Lead technical investigations and war-room responses for critical vulnerabilities (CVSS ≥7.0), coordinating remediation efforts across engineering and infrastructure teams under tight timelines.
• • Partner with cloud and DevOps teams to manage CSPM/CNAPP tool outputs (e.g., Wiz, Prisma Cloud), addressing misconfigurations, over-permissioned identities, and cloud-native risks in AWS, Azure, and GCP.
• • Identify, track, and drive mitigation strategies for end-of-life systems, legacy microservices, and unsupported technologies, advocating for upgrades, re-platforming, or decommissioning based on risk exposure.
• • Mentor junior analysts and engineers, fostering skill development in vulnerability analysis, risk prioritization, and secure configuration practices.
• • Advocate for risk-based remediation and secure-by-design principles in cross-functional forums, influencing product and infrastructure roadmaps through participation in security steering committees.
• • Stay current on emerging threats, vulnerability trends, and regulatory expectations (e.g., NIST, PCI DSS, SOC 2), ensuring Alkami’s program remains aligned with industry best practices.
• • What you can learn or achieve in this role:
• • Shape the strategic direction of Alkami’s vulnerability management program as it scales, gaining experience in building enterprise-grade security functions from the ground up.
• • Deepen expertise in cloud-native security, automation, and risk quantification while working with cutting-edge tools and frameworks across multi-cloud environments.
• • Develop leadership and influence skills by advising CISOs, VPs of Engineering, and compliance officers on risk trade-offs and resource allocation.
• • Advance your career in cybersecurity leadership within a high-trust, innovative organization that values continuous learning, certifications, and professional growth.